Threats tagged 'ghsa-rqcg-qxvw-p753'

A vulnerability in The Directorist WordPress plugin before version 8.11 allows authenticated users with Subscriber-level access or higher to access private and unpublished draft listing details of other users via an AJAX action. This occurs because the plugin does not verify ownership of the listing before returning its metadata, potentially exposing sensitive contact information.